使用 Secure Store 搭配 SQL Server 驗證Use Secure Store with SQL Server Authentication

摘要:使用安全認證儲存在 SharePoint Server 2013 或 SharePoint Server 2016 儲存 SQL Server 認證。Summary: Use Secure Store in SharePoint Server 2013 or SharePoint Server 2016 to store SQL Server credentials.

您可以使用 Secure Store Service 來儲存需要 SQL Server 驗證之資料來源的認證。您可以再用以這些認證存取需要 SQL Server 驗證 (例如 Azure SQL 資料庫) 的資料來源到 Excel Services in SharePoint Server 2013 或 Visio Services。You can use the Secure Store Service to store credentials for data sources that require SQL Server Authentication. You can then use these credentials to access data sources that require SQL Server Authentication (such as Azure SQL Database) through Excel Services in SharePoint Server 2013 or Visio Services.

注意

使用 SQL Server Secure Store 中儲存的認證不支援在 PerformancePoint Services 中。Using SQL Server credentials stored in Secure Store is not supported in PerformancePoint Services.

建議您將憑證儲存在 Secure Store,而不要儲存在活頁簿檔案或 Office 資料連線檔案。當您將憑證儲存在 Secure Store,並不是以純文字儲存,而您可以在一個中心位置管理憑證,這樣要更新時,會比內嵌在活頁簿檔案或 ODC 檔案中的憑證容易。We recommend storing credentials in Secure Store over storing them in a workbook file or Office Data Connection file. When you store credentials in Secure Store, they are not stored in plain text and you can manage the credentials in a central location, which can be easier to update than credentials embedded in workbook files or ODC files.

透過 SQL Server 驗證的存取資料來源搭配使用與 Excel Services 或 Visio Services 搭配 Secure Store 需要下列項目:Using Secure Store together with Excel Services or Visio Services to access data sources through SQL Server Authentication requires the following:

  • 必須設定含有具有資料來源的存取權之 SQL Server 認證的 Secure Store 目標應用程式。A Secure Store target application containing the SQL Server credentials with access to the data source must be configured.

  • 必須設定自動服務帳戶。The Unattended Service Account must be configured.

本文中的程序假設您有已部署 Secure Store 和 Excel Services 或 Visio Services。如需如何部署 Secure Store、 Excel Services 及 Visio Services 的詳細資訊,請參閱本文結尾處相關的連結。The procedures in this article assume that you have already deployed Secure Store and Excel Services or Visio Services. For more information about how to deploy Secure Store, Excel Services, and Visio Services, see the related links at the end of this article.

設定 Secure Store 目標應用程式Configure a Secure Store target application

若要使用 Secure Store SQL Server 驗證,您必須建立目標應用程式包含資料的存取權 (通常是db_datareader權限) SQL Server 登入。使用下列程序建立目標應用程式。To use Secure Store for SQL Server authentication, you must create a target application which contains the SQL Server login with data access (usually db_datareader permissions). Use the following procedure to create the target application.

若要建立目標應用程式的 SQL Server 驗證To create a target application for SQL Server Authentication

  1. 在 SharePoint 管理中心首頁上,應用程式管理] 下按一下 [管理服務應用程式]。On the SharePoint Central Administration home page, under Application Management, click Manage Service Applications.

  2. 按一下 [Secure Store Service 應用程式]。Click the Secure Store service application.

  3. 在 [編輯] 索引標籤上按一下 [新增]。On the Edit tab, click New.

  4. 在 [目標應用程式設定] 頁面上:On the Target Application Settings page:

  5. 在 [目標應用程式識別碼] 文字方塊中輸入應用程式識別碼。Type an application ID in the Target Application ID text box.

  6. 在 [顯示名稱] 文字方塊中輸入的顯示名稱。Type a display name in the Display Name text box.

  7. 在 [連絡人電子郵件] 文字方塊中輸入電子郵件地址。Type an e-mail address in the Contact E-mail text box.

  8. 從 [目標應用程式類型] 下拉式清單中,選擇 [群組]。From the Target Application Type drop-down list, choose Group.

  9. [下一步]Click Next.

  10. 在 [指定認證] 頁面上:On the Specify Credentials page:

  11. Windows 使用者名稱] 欄位名稱變更為使用者識別碼及關聯的欄位類型Windows 使用者名稱變更為 [使用者名稱Change the Windows User Name field name to User ID and change the associated Field Type from Windows User Name to User Name.

  12. Windows 密碼] 欄位名稱變更為密碼和相關聯的欄位類型Windows 密碼變更密碼Change the Windows Password field name to Password and change the associated Field Type from Windows Password to Password.

  13. [下一步]Click Next.

  14. 在 [指定成員資格] 頁面上:On the Specify Membership page:

  15. 在 [目標應用程式管理員] 方塊中輸入您想要管理此目標應用程式的使用者帳戶的名稱。In the Target Application Administrators box, type the name of the user account that you want to administer this target application.

  16. 在 [成員] 方塊中輸入的名稱或瀏覽的使用者或您要授與資料存取權的 Active Directory 群組。若要授與所有使用者的存取,輸入 Everyone。In the Members box, type the names of or browse for the users or Active Directory groups to which you want to give data access. To give access to all users, type Everyone.

  17. 按一下 [ OK ]。Click OK.

一旦建立目標應用程式之後,您必須設定目標應用程式的認證。這些是可存取資料來源的 SQL Server 認證。使用下列程序可設定目標應用程式的認證。Once you have created the target application, you must set the credentials for the target application. These are the SQL Server credentials that have access to your data source. Use the following procedure to set the credentials for the target application.

若要設定目標應用程式的認證To set credentials for the target application

  1. 在 SharePoint 管理中心首頁上,應用程式管理] 下按一下 [管理服務應用程式]。On the SharePoint Central Administration home page, under Application Management, click Manage Service Applications.

  2. 按一下 [Secure Store Service 應用程式]。Click the Secure Store service application.

  3. 在 [Secure Store] 頁面上選取 [SQL Server 驗證,為所建立之目標應用程式] 核取方塊,然後在功能區的 [認證] 區段中,按一下 [設定On the Secure Store page, select the check box for the target application that you created for SQL Server Authentication, and then, in the Credentials section of the ribbon, click Set.

  4. 在 [使用者識別碼] 文字方塊中輸入的 SQL Server 帳戶具有資料存取權。In the User ID text box, type the SQL Server account that has data access.

  5. 在 [密碼] 和 [確認密碼] 文字方塊中,輸入 SQL Server 帳戶的密碼。In the Password and Confirm Password text boxes, type the password for the SQL Server account.

  6. 按一下 [ OK ]。Click OK.

設定自動服務帳戶的目標應用程式Configure a target application for the Unattended Service Account

使用 Secure Store 與 Excel Services 或 Visio Services 的 SQL Server 驗證需要在設定為自動服務帳戶。「 自動服務帳戶需要針對此案例中,任何特定的權限僅限已存在於系統中。如果您目前已設定自動服務帳戶,您可以略過本節中的程序。Using Secure Store for SQL Server Authentication with Excel Services or Visio Services requires that the Unattended Service Account be configured. The Unattended Service Account requires no specific permissions for this scenario; it only has to exist in the system. If you currently have an Unattended Service Account configured, you can skip the procedures in this section.

注意

您可以決定是否已設定自動的服務帳戶來檢查 Excel Services 中的外部資料設定或 Visio Services 通用設定。You can determine if an unattended service account has been configured by checking the External Data settings in Excel Services or Visio Services Global Settings.

如果您為 Excel Services 或 Visio Services 未設定自動服務帳戶,您必須先建立目標應用程式可以做為自動服務帳戶的安全認證儲存區中。使用下列程序建立目標應用程式。If you have not configured the Unattended Service Account for Excel Services or Visio Services, you must first create a target application in Secure Store that can be used as the Unattended Service Account. Use the following procedure to create the target application.

若要建立目標應用程式的 「 自動服務帳戶To create a target application for the Unattended Service Account

  1. 在 SharePoint 管理中心首頁上,應用程式管理] 下按一下 [管理服務應用程式]。On the SharePoint Central Administration home page, under Application Management, click Manage Service Applications.

  2. 按一下 [Secure Store Service 應用程式]。Click the Secure Store service application.

  3. 在 [編輯] 索引標籤上按一下 [新增]。On the Edit tab, click New.

  4. 在 [目標應用程式設定] 頁面上:On the Target Application Settings page:

  5. 在 [目標應用程式識別碼] 文字方塊中輸入應用程式識別碼。Type an application ID in the Target Application ID text box.

  6. 在 [顯示名稱] 文字方塊中輸入的顯示名稱。Type a display name in the Display Name text box.

  7. 在 [連絡人電子郵件] 文字方塊中輸入電子郵件地址。Type an e-mail address in the Contact E-mail text box.

  8. 從 [目標應用程式類型] 下拉式清單中,選擇 [群組]。From the Target Application Type drop-down list, choose Group.

  9. [下一步]Click Next.

  10. 在 [指定認證] 頁面上按一下 [下一步]。On the Specify Credentials page, click Next.

  11. 在 [指定成員資格] 頁面上:On the Specify Membership page:

  12. 在 [目標應用程式管理員] 方塊中輸入您想要管理此目標應用程式的使用者帳戶的名稱。In the Target Application Administrators box, type the name of the user account that you want to administer this target application.

  13. 在 [成員] 方塊中輸入 Windows 帳戶執行 Excel Services 或 Visio Services 應用程式集區的名稱。In the Members box, type the name of the Windows account that runs the application pool for Excel Services or Visio Services.

  14. 按一下 [ OK ]。Click OK.

建立目標應用程式之後,您必須建立一組 Windows 認證與該目標應用程式的關聯。這必須是 Windows 網域帳戶,但在此案例中不需要特定權限。使用下列程序可設定目標應用程式的認證。Once the target application has been created, you must associate a set of Windows credentials with it. This must be a Windows domain account, but it requires no specific permissions for this scenario. Use the following procedure to set the credentials for the target application.

若要設定目標應用程式的認證To set credentials for the target application

  1. 在 SharePoint 管理中心首頁上,應用程式管理] 下按一下 [管理服務應用程式]。On the SharePoint Central Administration home page, under Application Management, click Manage Service Applications.

  2. 按一下 [Secure Store Service 應用程式]。Click the Secure Store service application.

  3. 在 [Secure Store] 頁面上選取 [自動的服務帳戶,為所建立之目標應用程式] 核取方塊,然後在功能區的 [認證] 區段中,按一下 [設定On the Secure Store page, select the check box for the target application that you created for the unattended services account, and then, in the Credentials section of the ribbon, click Set.

  4. 在 [ Windows 使用者名稱] 文字方塊中輸入 Windows 帳戶的使用者名稱。In the Windows User Name text box, type the user name of a Windows account.

  5. 在 [ Windows 密碼] 和 [確認 Windows 密碼] 文字方塊中,輸入 Windows 帳戶的密碼。In the Windows Password and Confirm Windows Password text boxes, type the password for the Windows account.

  6. 按一下 [ OK ]。Click OK.

認證之目標應用程式設定之後, 依照自動服務帳戶設定 Excel Services 或下列各節中的 Visio Services。Once the credentials have been set for the target application, follow the Unattended Service Account configuration steps for Excel Services or Visio Services in the following sections.

設定 Excel Services (僅限 SharePoint Server 2013)Configure Excel Services (SharePoint Server 2013 only)

如果您使用 Excel Services,使用本節中的程序完成必要設定步驟。If you are using Excel Services, use the procedures in this section to complete the necessary configuration steps.

如果 [自動服務帳戶已經尚未設定適用於 Excel Services,遵循下列步驟予以設定。If the Unattended Service Account has not already been configured for Excel Services, follow these steps to configure it.

若要設定自動服務帳戶To configure the Unattended Service Account

  1. 在 SharePoint 管理中心首頁上,應用程式管理] 下按一下 [管理服務應用程式]。On the SharePoint Central Administration home page, under Application Management, click Manage Service Applications.

  2. 按一下 [Excel Services] 服務應用程式。Click the Excel Services service application.

  3. 按一下 [通用設定Click Global Settings.

  4. 在 [外部資料] 區段中選擇 [使用現有的自動服務帳戶] 選項,再輸入為自動服務帳戶在目標應用程式識別碼] 文字方塊中所建立之目標應用程式的名稱。In the External Data section, choose the Use an existing Unattended Service Account option, and then type the name of the target application that you created for the Unattended Service Account in the Target Application ID text box.

  5. 按一下 [ OK ]。Click OK.

為了使用 Excel Services 搭配 Secure Store,您必須指定安全認證儲存目標應用程式在 Excel 中才能 Excel 活頁簿發佈至 SharePoint 網站與 Excel Services 轉譯。在此例中,您必須指定安全認證儲存目標應用程式所建立內含 SQL Server 登入認證。In order to use Excel Services with Secure Store, you must specify a Secure Store target application in Excel before publishing the Excel workbook to a SharePoint site to be rendered with Excel Services. In this case, you must specify the Secure Store target application that you created that contains the SQL Server login credentials.

若要指定從 Excel 的安全認證儲存目標應用程式使用下列程序。Use the following procedure to specify a Secure Store target application from Excel.

在 Excel 中設定 Secure Store 設定To configure Secure Store settings in Excel

  1. 在 Excel 中,在 [資料] 索引標籤上按一下 [從其他來源] 和 [從 SQL ServerIn Excel, on the Data tab, click From Other Sources, and then click From SQL Server.

  2. 在 [連接至資料庫伺服器] 頁面上:On the Connect to Database Server page:

  3. 輸入您想要連線至伺服器名稱] 文字方塊中的 SQL Server 執行個體的名稱。Type the name of the instance of SQL Server that you want to connect to in the Server name text box.

  4. 選擇 [使用下列的使用者名稱和密碼] 選項,然後輸入 [使用者名稱和密碼之 SQL Server 帳戶的可存取資料來源。Choose the Use the following User Name and Password option, and then type the user name and password of a SQL Server account that has access to your data source.

  5. [下一步]Click Next.

  6. 在 [選取資料庫及表格] 頁面上,選取資料庫和您想要連線的表格] 和 [下一步On the Select Database and Table page, select the database and table that you want to connect to, and then click Next.

  7. 在 [儲存資料連線檔案和完成] 頁面上按一下 [驗證設定]。On the Save Data Connection File and Finish page, click Authentication Settings.

  8. 在 [ Excel Services 驗證設定] 對話方塊中,選取 [使用儲存的帳戶] 選項、 輸入您建立用於 SQL Server 驗證的 Secure Store 目標應用程式的名稱,然後按一下 [確定]In the Excel Services Authentication Settings dialog box, select the Use a stored account option, type the name of the Secure Store target application that you created to use for SQL Server Authentication, and then click OK.

  9. 在 [儲存資料連線檔案和完成] 頁面上輸入的資料連線檔案的名稱 (或保留預設值) 中的檔案名稱文字方塊,然後再按一下 [完成]On the Save Data Connection File and Finish page, type a name for the data connection file (or keep the default) in the File Name text box, and then click Finish.

  10. 在 [匯入資料] 對話方塊中,選擇其中一個樞紐分析表選項],並再按一下 [確定]In the Import Data dialog box, choose one of the PivotTable options, and then click OK.

  11. 如果SQL Server 登入] 對話方塊隨即出現,輸入登入識別碼的密碼並再按一下 [確定]If a SQL Server Login dialog box appears, type the password for the Login ID, and then click OK.

連線至資料來源之後, 可以完成您的 Excel 活頁簿並將它發佈至 SharePoint 網站與 Excel Services 轉譯。安全認證儲存目標應用程式的連線資訊會保持在檔案中內嵌。Once you have connected to the data source, you can complete your Excel workbook and publish it to a SharePoint site to be rendered with Excel Services. The connection information to the Secure Store target application will remain embedded in the file.

注意

Excel 直接連接至資料庫。不使用 Secure Store。Secure Store 只會使用 Excel Services 轉譯從 SharePoint 網站的活頁簿時。Excel connects to the database directly. It does not use Secure Store. Secure Store is only used by Excel Services when rendering a workbook from a SharePoint site.

(選用) 您可以將 Secure Store 連線資訊匯出成 ODC 檔案並再使用它來連線至相同的資料來源的其他 Excel 活頁簿。這可讓更輕鬆地管理及通訊群組的資料連線。如果您想要匯出為 ODC 檔案的 Secure Store 連線,使用下列程序。Optionally, you can export the Secure Store connection information as an ODC file and then use it to connect additional Excel workbooks to the same data source. This allows for easier management and distribution of data connections. Use the following procedure if you want to export the Secure Store connection as an ODC file.

重要

您必須將 ODC 檔案匯出至信任的資料連線庫。Excel Services 服務應用程式設定] 中指定的受信任的資料連線庫。如需詳細資訊,請參閱管理 Excel Services 信任的資料連線庫 (SharePoint Server 2013)You must export the ODC file to a trusted data connection library. Trusted data connection libraries are specified in the Excel Services service application settings. For more information, Manage Excel Services trusted data connection libraries (SharePoint Server 2013) see.

若要匯出的 ODC 檔案To export the ODC file

  1. 在 Excel 中,在 [資料] 索引標籤中,按一下 [連線In Excel, on the Data tab, click Connections.

  2. 選取 [您要使用的連線然後按一下 [內容]。Select the connection that you are using and then click Properties.

  3. 在 [連線內容] 對話方塊中,按一下 [定義] 索引標籤。In the Connection Properties dialog box, click the Definition tab.

  4. 在 [定義] 索引標籤上按一下 [驗證設定]。On the Definition tab, click Authentication Settings.

  5. 確認已選取 [使用儲存的帳戶] 選項,且正確的安全認證儲存目標應用程式中所指定應用程式識別碼:文字方塊,然後再按一下 [確定]Confirm that you have the Use a stored account option selected and the correct Secure Store target application is specified in the Application ID: text box, and then click OK.

  6. 按一下 [匯出連線檔案Click Export Connection File.

  7. 瀏覽至適當的資料連線庫的 SharePoint 網站上、 輸入檔案名稱,然後再按一下 [儲存Navigate to an appropriate Data Connection Library on the SharePoint site, type a file name, and then click Save.

一旦您將匯出的 ODC 檔案,您可以選擇從任何您想要用來連線至該資料來源的 Excel 活頁簿連線。如果變更資料連線資訊,您僅必須更新本身的 ODC 檔案與所有參照它的 Excel 活頁簿會有新的連線資訊。Once you have exported the ODC file, you can choose to connect to it from any Excel workbook where you want to connect to that data source. If the data connection information changes, you only have to update the ODC file itself and all Excel workbooks referencing it will have the new connection information.

注意

您必須選取 [永遠使用連線檔案] 核取方塊以確定 Excel 活頁簿永遠使用連線檔案的 Excel 連線內容中。You must select the Always use connection file check box in the Excel connection properties to ensure that the Excel workbook will always use the connection file.

設定 Visio ServicesConfigure Visio Services

如果您使用 Visio Services,使用本節中的程序完成必要設定步驟。If you are using Visio Services, use the procedures in this section to complete the necessary configuration steps.

如果 [自動服務帳戶已經尚未設定 Visio services,遵循下列步驟予以設定。If the Unattended Service Account has not already been configured for Visio Services, follow these steps to configure it.

若要設定自動服務帳戶To configure the Unattended Service Account

  1. 在 SharePoint 管理中心首頁上,應用程式管理] 下按一下 [管理服務應用程式]。On the SharePoint Central Administration home page, under Application Management, click Manage Service Applications.

  2. 按一下 [Visio Services 服務應用程式。Click the Visio Services service application.

  3. 按一下 [通用設定Click Global Settings.

  4. 在 [外部資料] 區段的 [應用程式識別碼] 文字方塊中輸入您建立自動服務帳戶的目標應用程式的名稱。In the External Data section, in the Application ID text box, type the name of the target application that you created for the Unattended Service Account.

  5. 按一下 [ OK ]。Click OK.

若要使用 Visio Services 搭配 Secure Store,您必須 Visio 資料連線精靈] 中指定的安全認證儲存目標應用程式並匯出連線檔案至 SharePoint Server 之前的 Visio 圖表發佈至 SharePoint 網站可與呈現Visio Services。在此例中,您必須指定安全認證儲存目標應用程式所建立內含 SQL Server 登入認證。In order to use Visio Services with Secure Store, you must specify a Secure Store target application in the Visio data connection wizard and export the connection file to SharePoint Server before publishing the Visio diagram to a SharePoint site to be rendered with Visio Services. In this case, you must specify the Secure Store target application that you created that contains the SQL Server login credentials.

若要指定從 Visio 的 Secure Store 目標應用程式使用下列程序。Use the following procedure to specify a Secure Store target application from Visio.

建立安全認證儲存目標應用程式使用資料連線的圖表To create a data-connected diagram for use with a Secure Store target application

  1. 在 Visio Professional 2016,開啟圖表或建立新的圖表。In Visio Professional 2016, open a diagram or create a new diagram.

  2. 在功能區] 上按一下 [資料] 索引標籤和 [連結資料至圖形On the ribbon, click the Data tab, and then click Link Data to Shapes.

  3. 在 [資料選取器] 頁面上選擇 [ Microsoft SQL Server 資料庫] 選項,並再按 [下一步On the Data Selector page, choose the Microsoft SQL Server database option, and then click Next.

  4. 在 [連線至資料庫伺服器] 頁面上,輸入資料庫伺服器的名稱、 選擇 [使用下列的使用者名稱和密碼] 選項,然後輸入您的 SQL Server 使用者名稱和密碼。On the Connect to Database Server page, type the name of your database server, choose the Use the following User Name and Password option, and then type your SQL Server username and password.

  5. [下一步]Click Next.

  6. 在 [選取資料庫及資料表] 頁面中選取您要連線、 的資料庫,然後按 [下一步On the Select Database and Table page, select the database to which you want to connect, and then click Next.

  7. 在「儲存資料連線檔案和完成」頁面上:On the Save Data Connection File and Finish page:

  8. 按一下 [驗證設定]。Click Authentication Settings.

  9. Visio Services 驗證設定] 對話方塊中,選擇 [使用儲存的帳戶] 選項,輸入您在 [應用程式識別碼] 文字方塊中建立的安全認證儲存目標應用程式的應用程式 ID 並按一下 [確定]On the Visio Services Authentication Settings dialog box, choose the Use a stored account option, type the application ID of the Secure Store target application that you created in the Application ID text box, and click OK.

  10. 按一下 [瀏覽]。Click Browse.

  11. 瀏覽至資料連線庫。Browse to a data connection library.

    注意

    Visio Services 不需要 ODC 檔案會儲存至資料連線庫。不過,為了簡化管理,建議使用的資料連線庫來儲存所有資料連線檔案。Visio Services does not require that ODC files be saved to a data connection library. However, for easiest administration, we recommend using data connection libraries to store all your data connection files.

  12. 輸入 ODC 檔案的名稱,然後按一下 [儲存Type a name for the ODC file, and then click Save.

  13. 按一下 [完成]。Click Finish.

  14. 如果Web 檔案內容] 對話方塊隨即出現,更新標題、 描述與關鍵字若有需要,並按一下 [確定]If the Web File Properties dialog box appears, update the Title, Description, and Keywords if desired, and click OK.

  15. 在 [選取資料連線] 頁面上按一下 [完成]。On the Select Data Connection page, click Finish.

  16. 將資料連線到圖表中的圖形。Connect the data to the shapes in your diagram.

  17. 當您準備好儲存繪圖時,按一下 [檔案]、 按一下 [儲存],然後瀏覽至 SharePoint 文件庫。When you are ready to save the drawing, click File, click Save, and then browse to a SharePoint document library.

  18. 輸入檔案名稱,和 [儲存Type a file name, and then click Save.

注意

Visio 直接連接至資料庫。不使用 Secure Store。Secure Store 只使用 Visio Services 轉譯從 SharePoint 網站的 Visio 圖表時。Visio connects to the database directly. It does not use Secure Store. Secure Store is only used by Visio Services when rendering a Visio diagram from a SharePoint site.

一旦您已經發佈圖表至 SharePoint 文件庫,您可轉譯使用 Visio Services 和 Visio Services 會使用儲存在 Secure Store 目標應用程式中的 SQL Server 認證來重新整理圖表中的資料。Once you have published the diagram to a SharePoint document library, you can render it using Visio Services and Visio Services will use the SQL Server credentials stored in the Secure Store target application to refresh the data in the diagram.

另請參閱See also

概念Concepts

在 SharePoint Server 中設定 Secure Store ServiceConfigure the Secure Store Service in SharePoint Server

在 SharePoint Server 2013 中的 Excel Services 概觀Overview of Excel Services in SharePoint Server 2013

其他資源Other Resources

規劃 SharePoint Server 的 Secure Store ServicePlan the Secure Store Service in SharePoint Server

在 SharePoint Server 中規劃 Visio ServicesPlan for Visio Services in SharePoint Server

Visio Graphics Service administration in SharePoint Server 2013Visio Graphics Service administration in SharePoint Server 2013